Behavioral task
behavioral1
Sample
5ef1a8b53fa8cd79f5339f8ed7f60500N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5ef1a8b53fa8cd79f5339f8ed7f60500N.exe
Resource
win10v2004-20240802-en
General
-
Target
5ef1a8b53fa8cd79f5339f8ed7f60500N
-
Size
1.0MB
-
MD5
5ef1a8b53fa8cd79f5339f8ed7f60500
-
SHA1
6460ae2fce25d56baebf6d63fdda750afc31926f
-
SHA256
89f79ce50ef9ff127cf31a7d509e3e6b688936eee5dc010ca580219aa2f3dbd8
-
SHA512
301b79cdf37ac5cf12da5bb3c83a492075fc4ac7e3ba096e9a5f49e20fce3bf712a4e4f6bf7f4f9c900978e586f3f40cb4f040dcb08e610ab22f4541c8970b91
-
SSDEEP
6144:KFQ3RjTSP8ZeVdiZQjRBPCr8YC/htdCfiJYHSxKQjZHFR2W52z8urkL4vL/cAGFH:vj0wZQsE/hv28NeBbUjw2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ef1a8b53fa8cd79f5339f8ed7f60500N
Files
-
5ef1a8b53fa8cd79f5339f8ed7f60500N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE